5

CVE-2005-3622

phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain the full path of the server via direct requests to multiple scripts in the libraries directory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpmyadmin ≫ Phpmyadmin Version 2.2.0
Phpmyadmin ≫ Phpmyadmin Version 2.2.7_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.5.2_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.5.3
Phpmyadmin ≫ Phpmyadmin Version 2.5.4
Phpmyadmin ≫ Phpmyadmin Version 2.5.5_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.5.6_rc2
Phpmyadmin ≫ Phpmyadmin Version 2.5.7_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.6.0_pl3
Phpmyadmin ≫ Phpmyadmin Version 2.6.1_pl3
Phpmyadmin ≫ Phpmyadmin Version 2.6.2_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.6.3_pl1
Phpmyadmin ≫ Phpmyadmin Version 2.6.4_pl3
Phpmyadmin ≫ Phpmyadmin Version 2.6.4_pl4
Phpmyadmin ≫ Phpmyadmin Version 2.7.0_beta1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.7% 0.742
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://securitytracker.com/id?1015213
http://marc.info/?l=bugtraq&m=113208319104035&w=2
http://securityreason.com/securityalert/185
http://www.fitsec.com/advisories/FS-05-02.txt
Vendor Advisory
http://www.osvdb.org/20911
http://www.osvdb.org/20912
http://www.osvdb.org/20913
http://www.osvdb.org/20914